Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219047.roa
File: AS219047.roa (raw, json)
Hash identifier: XyOxthA0lgADuR5auS9SyC/inFnI+g3Ho9OB2fTKLzc=
Subject key identifier: A9:21:FB:3F:A8:34:B1:FC:89:45:AE:D6:15:BF:E5:57:59:10:07:8A
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 39A4453DB196635708137171091703F3FA1AA226
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219047.roa
Signing time: Thu 15 Oct 2026 10:16:52 +0000
ROA not before: Thu 15 Oct 2026 10:11:52 +0000
ROA not after: Thu 14 Oct 2027 10:16:52 +0000
asID: 219047
IP address blocks: 5.199.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 22:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a4:45:3d:b1:96:63:57:08:13:71:71:09:17:03:f3:fa:1a:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 15 10:11:52 2026 GMT
Not After : Oct 14 10:16:52 2027 GMT
Subject: CN=A921FB3FA834B1FC8945AED615BFE5575910078A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:ed:a7:2a:d8:51:2f:d5:05:ef:32:96:75:
37:59:18:d3:ad:3e:6d:3a:d2:2c:f2:8b:97:b2:c7:
1f:1a:2b:c5:6d:33:75:6e:bc:8d:c2:20:ae:b7:93:
d8:4e:97:b3:43:77:fb:dc:4d:e1:42:ac:ed:5c:be:
4e:30:bd:f3:b9:9f:d8:3c:08:b0:91:9a:9b:bd:b3:
dd:f9:26:99:24:ac:1c:ac:74:cb:06:1d:1d:32:74:
6c:1a:a2:19:4e:7a:d7:06:c0:18:7d:ae:f2:16:85:
ad:0c:56:73:6f:1e:30:2a:49:4b:ff:5e:67:39:41:
17:e1:4b:fd:c8:be:68:b0:fd:3b:34:10:1b:ff:db:
5c:98:6d:37:af:0a:da:a9:a9:db:cc:aa:eb:97:57:
1a:db:de:2c:8a:ae:8c:31:ff:95:f4:2a:86:8b:32:
a2:dd:e9:e6:41:ad:e8:fb:d7:b5:bb:f6:9d:05:0c:
2a:2d:2d:fe:33:16:1e:77:14:dd:3c:e8:6f:52:a1:
de:6f:5d:23:32:97:8b:0b:b7:bc:88:5a:a5:78:f3:
0a:f8:ac:37:bc:7e:bb:6a:cd:7c:ec:a2:23:b1:b3:
89:a4:4b:37:e5:f3:92:34:6e:1c:7f:98:f2:62:0e:
09:26:c5:bb:5d:e7:ff:37:8f:db:12:f7:b3:61:d8:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:21:FB:3F:A8:34:B1:FC:89:45:AE:D6:15:BF:E5:57:59:10:07:8A
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.37.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:41:70:71:00:d8:4a:68:d0:fa:33:66:65:bd:dc:fc:af:b7:
37:b0:09:0c:46:41:29:8d:53:3a:a4:b4:5e:95:a5:f9:4f:67:
4a:c1:75:c9:10:8e:80:5a:d6:f7:c6:73:8b:09:1f:0b:1b:55:
39:dc:c8:b1:ce:4d:48:15:b2:7d:0d:6f:45:78:4e:b4:5d:2e:
01:af:51:82:34:f7:4d:9a:36:0f:2b:30:cf:47:52:db:b4:82:
6b:1f:8e:8d:d9:20:7e:78:70:11:df:1e:0a:6b:32:de:09:0c:
af:86:37:96:6e:ce:9f:67:7e:ea:d4:0b:e5:86:2c:96:12:47:
0b:be:cd:9a:e7:e1:6a:b2:7e:96:2d:5f:bb:86:95:2d:86:10:
96:d4:d7:ab:1a:47:49:e9:d6:40:2b:70:8a:78:a4:40:e1:2f:
ee:61:40:4c:dd:b7:75:40:5d:9f:22:9b:fe:6a:a2:f0:46:bc:
6f:c8:56:52:e7:dd:b5:32:3f:33:54:f3:a5:4b:a0:b8:06:46:
85:20:36:17:a4:dc:fb:48:af:ff:76:b6:50:d5:00:f1:20:75:
0a:52:ed:8f:38:1f:62:1a:47:bf:2e:85:4a:a6:b5:4d:f1:5b:
b5:f1:04:69:b1:aa:48:5e:ee:49:42:ff:df:35:da:d1:55:90:
29:3e:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:18:16 2026 by rpki-client